Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: U7eJXfkGiNU93prNSUXCXerCfVIVmC5mCH0TFwKwGFg=
Subject key identifier: 27:79:2A:49:1C:DF:DF:96:5F:4E:5B:BD:1A:E4:58:D6:41:B4:D1:F2
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 019DA45367EF74BE8DB2352C1480AF042AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 06:00:22 +0000
Manifest this update: Sun 19 Apr 2026 06:00:22 +0000
Manifest next update: Mon 20 Apr 2026 06:00:22 +0000
Files and hashes: 1: GXhFfzPpIHoP7RLYcFMqTWluEZ0.roa (hash: Yx/Lhj5zxPnVZAFBihFZiUuZcLJQ578c7k6Oe82WcJ0=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: mdAjBd7b5QA6IQXfoZudhB1fdLoKYqa+GjzHkgnZGY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:67:ef:74:be:8d:b2:35:2c:14:80:af:04:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Apr 19 06:00:22 2026 GMT
Not After : Apr 20 06:00:22 2026 GMT
Subject: CN=27792a491cdfdf965f4e5bbd1ae458d641b4d1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:d2:9d:34:9c:ca:f1:90:67:00:af:f1:8f:
5d:75:4e:a7:50:20:f0:a4:44:a7:d8:73:d9:9d:eb:
59:ce:7b:55:f5:3f:73:f5:0b:78:f6:76:21:53:84:
c1:04:2d:5b:15:e6:6b:00:56:94:03:d9:27:35:f0:
de:d8:8b:6b:45:35:d5:86:53:f2:4d:10:b5:ff:ea:
f6:fa:3c:5c:b4:25:00:47:06:5e:da:c2:49:4f:39:
b6:81:1c:3f:ca:13:a7:72:56:ba:2b:3e:1a:4b:f7:
57:84:b8:b3:fd:66:a9:3e:ef:eb:47:a4:08:17:4e:
15:86:e3:1f:9f:77:c4:c4:38:53:62:aa:03:cb:3e:
4a:5b:99:70:cd:26:33:46:6c:c0:69:39:d1:54:fc:
01:45:16:7f:99:fe:00:ce:78:02:ed:d4:e2:2e:78:
3a:a2:68:1a:ad:9a:d2:63:b1:27:97:90:48:77:80:
8c:86:47:9a:31:d3:87:a0:5b:09:b5:f4:3f:b0:5d:
5c:c8:7e:f3:ce:3e:be:a7:f9:d7:bc:4c:01:2d:98:
9b:55:b9:25:65:97:28:e3:c3:aa:5f:36:ab:a2:c3:
25:e2:2d:be:ed:6d:97:f0:53:c3:e7:4f:24:d3:60:
53:3e:02:06:cf:59:b3:eb:d8:73:35:2e:b2:5f:61:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:2A:49:1C:DF:DF:96:5F:4E:5B:BD:1A:E4:58:D6:41:B4:D1:F2
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4d:98:5b:5d:5e:f9:8a:33:44:a1:d3:d5:e3:20:ba:59:fd:
16:28:bc:4b:1c:12:6f:c9:f3:87:1f:03:c3:88:12:73:e6:24:
83:bf:67:7c:24:f9:02:15:0d:73:0f:b8:ae:4b:77:a2:a8:d0:
e9:63:dd:7a:31:cd:b8:0b:b2:6b:37:e2:37:61:74:7c:5a:d8:
c6:44:88:8b:1f:f0:cb:7d:d5:2d:c8:89:f9:fd:de:4f:8c:85:
59:97:83:bf:0e:d4:cd:99:9c:49:eb:f8:3a:0f:9d:02:88:61:
54:a1:0a:93:66:7b:aa:5b:b2:6a:01:88:e9:37:59:e9:4f:55:
62:a9:64:7f:08:93:c0:d2:46:89:dc:cf:82:99:d7:0a:46:25:
e1:11:7e:79:3a:4c:91:5a:72:dc:cf:62:f0:af:c8:8d:2c:82:
80:75:d2:73:fc:e8:07:e0:38:a0:54:19:c5:4c:11:0e:d8:44:
33:5c:80:9e:48:f2:5f:6f:13:c8:8e:20:07:2d:8e:29:e3:66:
02:5e:c7:4e:07:65:ac:39:43:6e:3d:43:fa:8f:b4:5a:db:be:
9e:1f:d9:02:00:50:21:12:96:7c:f1:21:d1:14:82:c4:f9:ee:
15:ef:6e:74:71:92:3d:ef:2b:e6:b0:38:ea:9e:05:be:b8:ea:
08:e5:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:50 2026 by rpki-client